CVE-2004-2694: Microsoft Outlook Express

Medium severity, CVSS 5.8. EPSS: 8.6% chance of exploitation in the next 30 days.

Microsoft Outlook Express 6.0 allows remote attackers to bypass intended access restrictions, load content from arbitrary sources into the Outlook context, and facilitate phishing attacks via a "BASE HREF" with the target set to "_top".

Affected products

• Microsoft Outlook Express: version 6.0 only

Published 2004-12-31. Last modified 2026-06-16.